Analysis
- max time kernel
179s - max time network
188s - platform
android_x64 - resource
android-x64-20240611.1-en - resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system - submitted
17/06/2024, 04:40
Static task
static1
Behavioral task
behavioral1
Sample
b6ce7d4d35d5cd390b1d71b6585de8db_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
b6ce7d4d35d5cd390b1d71b6585de8db_JaffaCakes118.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
alipay_msp.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral4
Sample
alipay_msp.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral5
Sample
epayx.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral6
Sample
epayx.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral7
Sample
epayx.apk
Resource
android-x64-arm64-20240611.1-en
General
- Target b6ce7d4d35d5cd390b1d71b6585de8db_JaffaCakes118.apk
- Size 12.1MB
- Sample240617-fa28ysvdla
- SHA256 6da84996845fde20db45391351da159855ea071641b079eec3ff8b9b5f396e61
- MD5 b6ce7d4d35d5cd390b1d71b6585de8db
- SHA1 9887f7a1f4f5a291564b820c907a90290f2f6246
- SHA512 e9ccf5942d3c57ab5ecc172fcf6675e6cb1b5be51fee43c1b9f820471a9196eee910a8c223ad08c28217342e1f398e207f32f3e77ac4602f514c14624edcafa8
- SSDEEP 196608:b3pV2CSLaRgD2gfHoSYPRidWLJClArucbPUOHZanYHsgl+/HLo:b3pE7LN2gfscaReOoYHAM
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 4 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.mfqbzs.reader/[email protected] 5034 com.mfqbzs.reader /data/user/0/com.mfqbzs.reader/[email protected]!classes2.dex 5034 com.mfqbzs.reader /data/user/0/com.mfqbzs.reader/[email protected] 5154 com.mfqbzs.reader:GuardService /data/user/0/com.mfqbzs.reader/[email protected]!classes2.dex 5154 com.mfqbzs.reader:GuardService - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.mfqbzs.reader - Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Queries information about running processes on the device 1 TTPs 2 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.mfqbzs.reader:GuardService Framework service call android.app.IActivityManager.getRunningAppProcesses com.mfqbzs.reader - Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
description ioc Process Framework service call android.net.wifi.IWifiManager.getScanResults com.mfqbzs.reader - Queries the phone number (MSISDN for GSM devices) 1 TTPs
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 3 IoCs
flow ioc 42 s.appjiagu.com 48 d.appjiagu.com 69 b.appjiagu.com - Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.mfqbzs.reader Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.mfqbzs.reader:GuardService - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.mfqbzs.reader - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.mfqbzs.reader - Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
- Reads information about phone network operator. 1 TTPs
- Requests dangerous framework permissions 6 IoCs
description ioc Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION Allows an application to send SMS messages. android.permission.SEND_SMS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.mfqbzs.reader Framework service call android.app.IActivityManager.registerReceiver com.mfqbzs.reader:GuardService - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.mfqbzs.reader - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.mfqbzs.reader - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.mfqbzs.reader
Processes
-
com.mfqbzs.reader1⤵
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:5034
-
com.mfqbzs.reader:GuardService1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5154
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
2System Checks
2Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.mfqbzs.reader/.jiagu/libjiagu.so
- Size 482KB
- SHA256 8455632be7bacb221468c4daab2f9b5ee33739f08b22244ff81a36a02bec36cc
- MD5 f380717bd1e3916c7b697fab8d46c5d8
- SHA1 04f51f0d16097214e38be517d93be44cb0603a88
- SHA512 b78fe11f77d2c0ec5b36850e8cc3b955661b31641405233c8842b91205e44dc16a30d7fc1ef18dde1b066c1b98959ae9c18be5472413d2b398b7ab6a6b52c07e
- SSDEEP 12288:1U00fCZt8ej46h8oQaik5P5ci1tUDTDakfmpjcjkDGaT:1UzfwJP8oQgRZ1S/avfC
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/btechainh.db
- Size 20KB
- SHA256 07d9ea4563fc8906244dfb972918a1c030c8caa0c5d4fcc378106570fab4e9c3
- MD5 e971f72e15d5a451ecd03a2bd4beaaec
- SHA1 5a02585a18a2169626d2ee7cdc766c0c97865fbe
- SHA512 3252ba85183deb87d2ed1532f5f5b2c4aae983543a6c05580dff8c619422a1d5dec72a83c48a333ead569a3281d936fe9f3310402b422ee41dfa472ad3bfe9ee
- SSDEEP 6:l9bNFlq4yht4KdHOVugLuusCmsoA2M/ex2OkjsqpAG4JDKoErLm/MkERX4PBX4oC:TL60uFv3mBG2MjJ27RmBEyPbAVOw
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/btechainh.db-journal
- Size 512B
- SHA256 a6084ac97d3eb02b73f08ebb0a219beb1f7966787b25553aa7dea3e06a2545d4
- MD5 bfe31b620ed17ed4715736f5384ca4de
- SHA1 fe4031f0bab48d0c60c864c93e208f3e38001635
- SHA512 a8fdbee64b401315fedaf6bcc5592cfc09b9226982aa7ba80f53d9c73b4beba61f43dcbdc18a69aa97d718f6733b74be72ffa80e974f8a05877a364af1f0c23d
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/databases/btechainh.db-journal
- Size 8KB
- SHA256 2e7e9571bb3c6816e987e02b907e2063fc267dbce0afa7b2c9781c7447868671
- MD5 91b978c0bc24b9211df84838940f042f
- SHA1 937c146dd43c91fe3d89e2aac1d7064da31d3995
- SHA512 df23812cb2448a6dffac36f89122b6f42c26daeb43201e3661d2723e747d28f5f75ab0e73a5b3e9b55715c5bf6215093ee5e985f3f1eaa06af03013a5c1403f1
- SSDEEP 6:7+/l9tuHn13WWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKy:7+tj4WWqLiuWdwRmBEyPbJ
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/btechainh.db-journal
- Size 8KB
- SHA256 278776838435ac4c43446a8b7d841331202db52553a76ddd90a0f224c6e81428
- MD5 808f9cc29e7739e30274028187b5fbc0
- SHA1 41c4adb35f18e4a238853e4090b1136710690111
- SHA512 701f632477d777764eeea81d1d1f3ec94c8b306ef0384604af83cfa3b3454f767c2c1958e63e607a9486f57f90de1a98b780eb6001d3f011a3d0fd86547fce06
- SSDEEP 6:7+/l9rHPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKI/Q:7+tNvqLJdTRmBEyPb3Q
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/easouBook.db
- Size 36KB
- SHA256 4f695ec4765b39b1cd65bba39d1b88e0c228c0878c43d2e4e20e80ebc38e203d
- MD5 b0e5c7820b2e848f705e62b5a95d5730
- SHA1 56eab38f6ffe03054882548fe69b2543739f187c
- SHA512 8c39abdf4b25f084c6fbabe57c524714b727cbf226bb5360db187e80e326ae139490d1e48f51d920ba5405bcc46b4264144f7fc2a3c516981f15ace75f4ccc86
- SSDEEP 48:TgzNs5GBgc5zQgiS1GPKfelqzNximO518IJK94BqcITS:iB2gizTZmV8K94Bf
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/easouBook.db-journal
- Size 512B
- SHA256 997be557174c2156b2bfdf61f1c63007b1916ff904a4a0fd87732e447a22b458
- MD5 1eb051ddbeee63277879332f0074b4bb
- SHA1 f34d39e4a046d1692f776f07d38455c885261e18
- SHA512 0791f55a7df4771842fa0acaa8a1e792cca6ccc396f46c22c2df66122424fb01b855f36dca3445accce9d4eb4366673ba35163889e84984084d47b81e8957c15
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/databases/easouBook.db-journal
- Size 8KB
- SHA256 ba086b6177856bce1218956c198f328869e1624589369d82bdcc6e335d44380a
- MD5 62c46ce8963a500dfe1c8714c7c7a9ed
- SHA1 be7d4c9a3420c8f4412c534e1a3d9ccdf7be13cb
- SHA512 d54247afc3bda5e41957aa77dcf47e26c1452a4897c31ae25e55fd050b9dbd185eb36c336a14a31df4b07d6b6aa53a27f0e4b435fc43c0fc363790fee50547e3
- SSDEEP 6:7+/l9E4n1svg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKV:7+tKNvqLiuWdwRmBEyPbG
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/easouBook.db-journal
- Size 8KB
- SHA256 8ae532aec5f915f4337c45a2a92e3ed6e9ea4d8260e33003e7fdd4bd79a3f8e5
- MD5 f5f6798f380fc575eca14ab94b71d12f
- SHA1 81b9ade2933c6bbbf8aa8d0e5984d416ec259022
- SHA512 32b948b4e495f1308485dbcd2667280c22fb542a7385da5208ea54aa85481690256cfa99d9d77b666fda14d5b8b4cb0a404092dda45fee0bfeb87d1800cd3170
- SSDEEP 6:7+/l9nUGPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK8cU/c:7+tFfqLJdTRmBEyPbm0c
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/es.db
- Size 20KB
- SHA256 37db9dafadab1599952db2917dce6d2ca76e9e60cd19f90fb0c14594fde34823
- MD5 4d04d2eb1546a2183038edd2ba3fb65e
- SHA1 f9ee35d25f1a85a00c6a9d6843c96d47699a7a35
- SHA512 369f916b4fd6665e884d1ea1d87814e28af630ae0b341bbdb44c01b693cdd5ec70faf142ac156662c278d889bf1769ca3c94dc3a27a9bd8357cf39c41f1b5fd6
- SSDEEP 6:l9bNFlq4yn55rkSuO7tLuSTIOey6/SUlmERX4PBX4ogLugMBX4suuKfpqiOw:TLgbrVUYu5/S89RmBEyPbAVOw
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/es.db
- Size 4KB
- SHA256 380e44a46eab649a5f7b9739f6c2557dda03447ac33bbbccf6ebfd038f630900
- MD5 b6108a075c21ec4058b956d0148dba4c
- SHA1 dc97ab5186e76717f38efee7dcde7ad95937fb92
- SHA512 a4daf90b80e292543398b61e5d682bbf04d6352167940f3c441788c3b39d745870738ea6769aa54804243c480aeb29ff4efeb10262719808ba1636691f715528
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/databases/es.db
- Size 4KB
- SHA256 22faf6cb0bf72f29763a82cea71dba783c48cec991cd842dbc1e71a2dd27fbd9
- MD5 d97446e4b5a8199801e892b77bfa7961
- SHA1 6419d65d461970a43105360208089f6cf35253dd
- SHA512 c518e41fb57f940690fc9a7068be4ca9420788776c7590f3268339d1d74de01fa3e9c38a8b2dc9c45f17a452a2199c7ec04130db58760c1b3a392415484ac128
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/databases/es.db-journal
- Size 512B
- SHA256 d56e87f1f8514099ddf67ec233ec7a429096bd0d5576f16d3e3a9a47d69019ec
- MD5 006623a545f3c9b1b088b322fa5ecba3
- SHA1 14ca96521757342a22de15e44c39a7ce4ed7262e
- SHA512 56d0c53d2a81d3318060f5289f7d5abf0d69221ba20fd43e0a6ff16144c7844fa1266068b82293e76e47a89bb780bad5bcf81ea166b7e476070a744602203880
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/databases/es.db-journal
- Size 8KB
- SHA256 05024fa166bbc2c4ca65f752b02f4b780e63b696b46956dfe4392c84086eaeff
- MD5 071e24dbe1f01c14e45ba86d34fddf09
- SHA1 5dd576999a4107c9bbca6fab4fac3626630c6d13
- SHA512 f72b814a85cff8fae30f201d01e83730188582815fa748b4ea05726582c27fb04796bf8de50cc0495c6e986d568a275873c136197f8623be3a357ac56ab2ee28
- SSDEEP 6:7+/l9vn1zovg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKR:7+tsqLiuWdwRmBEyPb6
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/es.db-journal
- Size 8KB
- SHA256 641fc1857711c6440fb688c74ae8cb066f285d3bdf76c00397915bc0f4622875
- MD5 a08f5474d2ec8dafe507ba517f620910
- SHA1 ae3e51fcd2f58de624a2ae16ce6ce988a2816ac2
- SHA512 22dd8be8cb0dd552e8c5f16e82774e6963e8fbeaea6783f24994c4c7b9161e529c868e745e9a6fba651def20ac48665b75a261f61e6440a9a3b9e167a7f0a1da
- SSDEEP 6:7+/l9YxPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK2M/B:7+tuqLJdTRmBEyPbhsB
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/es.db-journal
- Size 4KB
- SHA256 8b228540eaf0383a20af2bb8e8a3a6d3445caeba4a046eb4b60d8f3d1c0a4c84
- MD5 4468bc165b5a82d8540f93f525fd3a6d
- SHA1 a903362bfff0e9f6f6a09b8d67d4192423bef750
- SHA512 d83c505abc98087dc356bcbba1892bff62c3a3041e11f80224735e337132ada5f0664fad18c1efcf3dd2d0ad871e44babefa364883d8d24e66ee665749d0e7e2
- SSDEEP 6:7+/ltng9bNFlq4yn55rkSuO7tLuSTIOey6/SUlmERX4PBX4ogLugMBX4suuKi2:7+ttnqLgbrVUYu5/S89RmBEyPbT2
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/es.db-journal
- Size 4KB
- SHA256 a7d1e7c25018e1a1d2532c0034f76c8d724eea42a6a8adca6d7840cae0a907ac
- MD5 e226e111cf040cbb12932cdb1736f73a
- SHA1 2dba3a95e24e05a3caf2ea5116a2989a38014ab6
- SHA512 53464f17bc269cbd25babc2a61960fa1472938b159eb1dae74f64809e75c8af88607b309090cf81763c700ce71facab4cb22946e0c4c06d879b29b845178bd7f
- SSDEEP 6:7+/ldJ9ng9F2l/yn2h5rkSuO7tLuSTIOey6/SUlmERX4PBX4ogLugMBX4suuKg:7+tJnqcs2zrVUYu5/S89RmBEyPbP
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/es.db-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/eventInfo.db
- Size 20KB
- SHA256 56b461955e83d90edfde518a1a927483891c2833ddff8793e21113e4d229f2e4
- MD5 937f4ff8817c20485ee17d452efaeb27
- SHA1 14675a63d205ea87bced6f6c499fd861e264750c
- SHA512 62d30b2050ddb41fa829cebb5140bd5a1e234bdb77c9f6519ddc5b271bed230281ea61f8c8a7fb42068b54bf938f5231dcb7348d190cc39e4bf205911a8e3dbc
- SSDEEP 12:TLmvyNTSFbyrXARXPUh9qR1zRmBEyPbAVOwG:TL3Rw4IgGSEG
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/eventInfo.db-journal
- Size 512B
- SHA256 8dcfe709804c96163d3c6aec315b388b6aa4b9d2cfdbeb4b146d47e961741494
- MD5 8116dc6792a9a46bc5d9c8a486bfd7fb
- SHA1 4eec07f2e09c41b4a4e7f175dabd2079528ff314
- SHA512 ca2721f9584bf5b79bd9728a9db5147d684e3ac8b0065ce6bc6dd90e7e8ef4c9bf27725cb9b83b39ba1b4dbcec6932922259b9a2696481de83acd402f1e8f4e6
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/databases/eventInfo.db-journal
- Size 8KB
- SHA256 0173529be35890c3959d45a8d955a11860adf00266e5321dee79e589f8060b22
- MD5 840e7bd4b4fa5d609c6b1ec30b70586e
- SHA1 4967c754a3cf31fdab529a7bfd5d345d9cfd7477
- SHA512 704419e673cc946d3548aef449404e47a7832afe25ed17d7518bee496e054c625fb734c036380d8b9eed074e5419c6c5305f2702f71d0e7a67f63bc94657a957
- SSDEEP 6:7+/l9zYHn1ScW2vg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKorn:7+tRTWqLiuWdwRmBEyPbl
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/eventInfo.db-journal
- Size 8KB
- SHA256 3e0082c9b119f830af6aaa67215ad9c2b2fd38314c726b41d8a1a176bfd58484
- MD5 fcfcf01f8025dfd41bc979168e998666
- SHA1 672132bfdccda30cf41ff99df34711169ee356a6
- SHA512 9e24eb9fbb308be6fc09b82cf98b1c50f986c4e435cc81f47f278aabaf06945bf6b64d3186e20acfe99651e6da916251367879dd287ab96224e9a087c606754d
- SSDEEP 6:7+/l93cglFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKsht/6:7+tVzBqLJdTRmBEyPbN6
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/local.db
- Size 20KB
- SHA256 661a1035443118ae4746d858dc4e1c99a92dad7d5d9fc7c9b854c2f93b938140
- MD5 6a57c85bc94d47d99554bbc499c31491
- SHA1 6e7856f44e58b0231d4aa675ef8f4226774c2793
- SHA512 84246f22581b10316fcedb27ec10e36db4ac5a5e425d957fb81dea7525e99f1d7be7bb6b57a55f49bba6707ab8a2b42fe682c4a4b114080a7ebe927c65a9a13b
- SSDEEP 6:l9bNFlq4yl1KwCOlHW/Lu4xkAuyCACflWERX4PBX4ogLugMBX4suuKfpqiOw:TLmKwBF4SFaCf/RmBEyPbAVOw
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/local.db-journal
- Size 512B
- SHA256 5e02ec4e840cded2e7c698f03cebce37b1464ac5cf88ba7599a278af824c7003
- MD5 539d22849a86d71a1c3859bbda1c7899
- SHA1 06e93535a2fee53392c90a9f14c2d409e08c4d7a
- SHA512 47c0a3545ea9a8ecc643ae95fbecaf2aca3be19341002e31effe08858bcd5bc1b8d2617ce346d1fe54bb3f9e47f038eb41476cf6c8aec160880412247e1096c2
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/databases/local.db-journal
- Size 8KB
- SHA256 806b98ce4bffb552c7012f73a8f4a69c3dd887a7bea6b4b71a50ecb139344396
- MD5 adf08ec5d03ab66c616a0188d430f140
- SHA1 66c5b2ce7b2aa49d29b89fcd8e166d397139a696
- SHA512 157b58b0a06c0aea455f74fcbc1a7a5425b4248ee8709930193b02018d800c7c45886b8139fd675f42d4c713cbf27bb61fa4c7bf250488138cfb3272226bdc16
- SSDEEP 6:7+/l9I/gn1Qng9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK+c:7+t4qLiuWdwRmBEyPb9c
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/local.db-journal
- Size 8KB
- SHA256 b68e9991c9476540b00dc7c5e0184f8f9a7a610ea8e5252adde5558190f6c05a
- MD5 f90229c72855410df963351f429128a6
- SHA1 908bf8f6c6d1f46f48513ff3088d691dc6308636
- SHA512 6ed52a3fc7b516fa8da11f3fa8f6119178428220ea649e5a41dfdbb924fd22aed5cf795e96687b17dfe49763a66a8f27b9d22482c0a8063c1e6239cb694bde75
- SSDEEP 6:7+/l9Z9gPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKIM/F:7+tJ4qLJdTRmBEyPbRsF
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/localEasouBook.db
- Size 24KB
- SHA256 8d32c7d691e574d08c258947b43af6b175efb6b9d2bfe8a716eb8cbad34a2e8e
- MD5 9a450166711c3b79d00dfca23c440721
- SHA1 9ad3fcde27c45d61c8650eb92645604e7d6b81aa
- SHA512 126c90119df4ac34c8f523491aabcb85f22508873392341e0116cac2af50f7bdca207fedd868cdd51d67e0d928747f4da141bbcba4fe9dfed956755ec5596cc1
- SSDEEP 24:TLM4e4fmwmDB+qbC+RQwj51YlK/8n2EGSzGQ:TYqmbDBm+mwj5GkU2TS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/localEasouBook.db-journal
- Size 512B
- SHA256 70f41de918b281bc91483bd1f777c37c4d7b2b0a22e5a11b9dc06b2d3d63c080
- MD5 a55349d0e5ad20e9449892746262aee9
- SHA1 afa44bee7d2f742f8244adbfa9ce006636558678
- SHA512 84ca019dcd911e784acea348991f9d0e395dac4896f2bf6a28a620b05c2f6ff6dd8adefc7ce2a395410ba651714689bd3e3f3a94acee9f38dc36cab030fd5d93
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/databases/localEasouBook.db-journal
- Size 8KB
- SHA256 3473c46a4fe147e7ffbb5f166170c4fd9ac816f7fac28d6291998971dded72c1
- MD5 84850b58c502659d47663487bc384867
- SHA1 ad73e15c0b13b88c1cd1dd85fbdaa0b74bb8539a
- SHA512 067974cea6cb678a5449bcefe0aefe344737f3400a49a36953660cde4ca7fde3460ffa63c574fd1c5aac47029c859152e6a1c89ba5720a46b3d83710550408f3
- SSDEEP 6:7+/l99Dn18Ewg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKXn:7+teEwqLiuWdwRmBEyPbI
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/localEasouBook.db-journal
- Size 8KB
- SHA256 e95d631a8dd5ab17c3de5abeb031eb2e284cd69f6ae3b565b7fc571be5fc05e9
- MD5 0b1df49a4cfd8390b8248057d4de3fc0
- SHA1 047449f7be67efcb1560e375e6ba4a0e28723c2c
- SHA512 e55256ee6f57fb75b8cb2ce1f4557a9de3ea32d5ce8f5019f3b9bc9e0e2e7d47210ac2512993447f5ef2db488a3f8437a281e91a91e2387bc076466fc3080bde
- SSDEEP 6:7+/l9GPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKov0//X:7+tIqLJdTRmBEyPbvMXX
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/techain_d.db
- Size 24KB
- SHA256 8ded5c9e9b0ad4571663013f1fa1815f2c1a6506b53033d5789952720c286ac4
- MD5 a3086fb430e766c353dc4223eb3e9b54
- SHA1 cd120c0beec7410a38b0713159a96ac19e56d6a6
- SHA512 908a1f1b8d92c964d5595fb96fb6430aeaab87efc48e7ae0a737fb79e14845ffbf85328b48753ee848163370b04ebdf37b14a807585883180974c5fa22b9b67b
- SSDEEP 48:TO+x4lbz2eSre0D4T2xfkpm0Q3HeFPpNTWHZKIrr2gt:6+x4V2br57fiE3HeFBluZJr5t
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/techain_d.db-journal
- Size 512B
- SHA256 d4ada03dfeb8e1f5c2c0521649ab7529c5100df7c8064de58e4fca8c8032b7d1
- MD5 6b9187bdb85f660762281df66e4d2cfc
- SHA1 b46e738784989ae4c9ebfd828b93c0206bb75e4a
- SHA512 7b29f1b698b21d68ece16ede93fadefa09e153ea1c39727af8c4b834d182c939b6ae9b3aab4984daa02753f7dbb89e819675628cc76f025f728a9eb72626606a
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/databases/techain_d.db-journal
- Size 8KB
- SHA256 d614e4030f8e229516ae38d5e2e65b723b562348fd73af60cabd8978fb368f84
- MD5 2dcc5a9405afa4798b63e82ddb52ecc3
- SHA1 16a5b11a5ab61c57d1fde0fabcb5ff4c1b6c6e25
- SHA512 7921afbb22e9d23d575e3c3754cc830077456584611401770a586ea4ee574c1bba0b8c023b2587966387c34f9f404738deb0d1eb245c67c50feeac5f3291a948
- SSDEEP 6:7+/l9hqjGn1kjpg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK6e:7+tkNqLiuWdwRmBEyPbLe
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/techain_d.db-journal
- Size 8KB
- SHA256 62cf7356d2e1eb62bff90ca4ef7c4dfc2e96e67a17dc09918f4abce7cbcb7864
- MD5 cf20acf8a94dfe7de6bb2fa288a22a37
- SHA1 df3838b80e4b3bf91b9d7cff68aa02d24a081fb1
- SHA512 1f2661605ae8a1f4ae7f9269240f51d46f63395305982d96dfa978cae7954054d536a67c378f24aa9fd6976d2110e2ea927366a125c92de6e84c94f70bd6f8df
- SSDEEP 6:7+/l9BPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKoV5/ez:7+tfqLJdTRmBEyPbXha
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/techain_d.db-journal
- Size 12KB
- SHA256 738de92a3e080cc5aff577ea49c4de92128dffa718db8c364c36ff3dab0dccef
- MD5 a20bf6d5aaf3c16bf6ee8906a0c05dba
- SHA1 1b2fef6fc889b9d17de4dfeaa18c55f2f26c4c33
- SHA512 3dd8cc667fefef0ee2f0127e810fdfe1fd9021dd3d8233f8c63077ae5bc98a7e194d953fb9c416cba1cd057a5dd68641dc7012a5aa5516ec7485238a195d18c6
- SSDEEP 12:7+tD/GqLxywPrr3EjAMHlTSFbyFQsWMH2O4KKt8sTtcRmBEyPbG:7+tDeqLxNPrrKHlXLLH295nGSG
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/techain_d.db-journal
- Size 12KB
- SHA256 69a3e2c013623b1236410d13b669ceebb2e5d783313167f7eae6830d138ed45f
- MD5 704c01cfe138afb1a1c7f838a6a68292
- SHA1 81de8164b55098f943f2c742bba187dd3f2253d8
- SHA512 81e79b421dba0015d8663d497600185bee6c7610bc368ec824da873e0bb9264d70e2d44552d0ba1635ebf4d2f92add5da5a5d857d8cefdfedd9b67664af7b018
- SSDEEP 24:7+t5wnle/xdy/9hY8NqLm2VPrrKHlXLLH295nGSG:7MKrTqK2l4lbz2eSG
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/techain_d.db-journal
- Size 12KB
- SHA256 d2144d838a454ffb20286c40434a134cbc29678458484ca8011774b54ba204da
- MD5 9028eb4e766d35a97bfd3c7fd31ba642
- SHA1 a25a629efce47afbaa9004135f95790835f00022
- SHA512 d4424275c6d1130d37a497056328659c02e3dcf823a64a4836721f8b62b4aeff37ad4f2732e1eb41a2932c1a63648342ef6fc7c7ec489d34fa29f1a121bb46e2
- SSDEEP 48:7M+2xfkpm0Q3HeFPpNTWHZKIrrhWqoq4lbz2eSY:7CfiE3HeFBluZJrVWjq4V2bY
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/u.dbv5
- Size 56KB
- SHA256 3b32fdba75a3168168865aa91b6ba5bc432a28f381d28c9c54bbb7224eb98f12
- MD5 3ec3fe4465112d362d491550ff564b59
- SHA1 01f04ee75f50c9a57f02dd4025384b231b2fc1d7
- SHA512 1c4412a1f3d4293387073647fc8ce81379d4f58e05ad31096300a0570e7546b08b9252c80de0b4d695507bd523177f5dbcd96063247084f896085f15046d0c9c
- SSDEEP 48:TMddy9EVRX8vp45iqbWN9F8AVSLrjRKSLqBLe5ISCeE:g3Yvp4Yqbe930LBKnWCeE
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/u.dbv5-journal
- Size 512B
- SHA256 93e7d8ea434ad7d4292142591eafb50a565001f715f1c886a8620922ea8dfdf7
- MD5 387fa43d3fcc8f0c5c4341ba50d074ed
- SHA1 cb5d2c434b0c1d3781396ad37b2dfca1e775ab22
- SHA512 030a79063760e9953b8b3e87fb714c0937e8cfe4a394006c4f26dc8527561ad3b7969740e70e7d46ec38df342cada184b53a22eb0e2f02fcd0d032673fd26319
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/databases/u.dbv5-journal
- Size 8KB
- SHA256 3815c90f60ddc76e5d76a9958ab52759c75185fc8f8c2547da784566d8f264d5
- MD5 8023ccf169fd66f8567452009514f509
- SHA1 2df152edfd0e5a827b5e73452238b453db4cf4ff
- SHA512 9e77290efcc0d0f453784c73011ebf2122c9dc6df45cff7511f4c69394d957b0b20ad755b317c962e9e8d661b76ab97cf74870abf7ce672cc6bfae01d5556961
- SSDEEP 6:7+/l9+KlFn1GIWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKh:7+t4Kl0qLiuWdwRmBEyPbW
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/u.dbv5-journal
- Size 8KB
- SHA256 1af1fdf7898e0b846d9e4a4ba656da01d855e36713971183695e22662f992a59
- MD5 cf8926b508491fd721b5717e2ad024bd
- SHA1 ccc3d865d036f3e73f9ba557a5f22037a4c04769
- SHA512 b2c3e56eba1209055dd523c6686e3fb33ae6426b2a4d5e8192ce564ee52d2003ae119eb7799d850fe2b786b68e024144cc3d58cb71675c000304d6e2e1e09a5d
- SSDEEP 6:7+/l9IHPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKX/j:7+tevqLJdTRmBEyPbMj
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/databases/u.dbv5-journal
- Size 12KB
- SHA256 db9be538138b09871404a931bc0d2325f2a76437bd02b62e3996bf5986e92649
- MD5 8d9e34c00107ec8eb27d3c81a6ee4927
- SHA1 b926e617c88a99ced39c7546b8ffcbd4ba98ec78
- SHA512 4f1f37db4f56e1dbd17138dcd345c6d814a5507e0aac94a5548eabb8bd99375665df259701214a92bce31450a7f675d54919acc4eb5cc5524695577e7b248b82
- SSDEEP 48:7MUq6dy9EVRX8vp45iqbWN9F8AVSLrjRKSLqBLe5ISa:7lNYvp4Yqbe930LBKnWa
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.ac
- Size 40B
- SHA256 33358cc194f107aa52c479750c31a10904507bde9b956aeb04a0c3f89bd70acc
- MD5 06f1667ace5cb6b6d295a95acdf88902
- SHA1 2efd6d91a3241eca3fe9fc1da23a433a8e16bbb1
- SHA512 f10ead0973b82d536d782c3639fc7bfd7dbb735d2af4317948f7755d0106ca79134b2f4be4612b8136b474dc52e59ba9e86ace9b4f5bca09aa0314dd57462e13
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.ac
- Size 40B
- SHA256 a8a94379ec004cfbd457767dcd516667a024e428b4c9f4d1a5af9c3eada51b50
- MD5 279f2b2aea18d56e5f90a989c4069844
- SHA1 b0a6df0a389515e1e502117af241e75f2ad0b703
- SHA512 cad34edd73d30c97853e64aaf3ebd6a8ddc78655b22af59d98713a6b89e30127254725945c7ba55894c843d5ac49a5e5c89fa7ea3aa9be61016bfa9f54b95a97
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.di
- Size 340B
- SHA256 a49578b88d87103dbce0c545ca7254496b277d4ec3ad56f188aab2e84190f8c1
- MD5 4c4edd8fdfecfbc623503535003c3d1d
- SHA1 8fcda9af75e2b0581d3f636a052549c50da42f9b
- SHA512 bcccb71182a6e2d83a88027893adc43e5cfa2097491e97396c8f8216741ea3bf61cd199004a060dad9def7fdc1be484b70ed4b9799ab7ee21724ffe9b73ef497
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.di
- Size 340B
- SHA256 68be5322777b3ea2cb4606cf46d0bc3952ad2b485284af8d37d8068385ad1e76
- MD5 2aba1bfcb5c184dd4c8980c3e1eaf43c
- SHA1 d3ec96b037ae320fd8a53998f888f4795794d6bf
- SHA512 d7472ebb6bf1ee3bd3d987e4cfa584988300536fde549efaad5c578bdfac00010e13032ae6f8195ee3315ab03ac992287c530bbc421080fe0c77ec0ffc1054dc
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.ic
- Size 40B
- SHA256 394a02bb2c0488812c07ef7c5e9ae7d280d89a1e0324e3588c3e80cc82c429e2
- MD5 df45e3b484767854bb698b37f4928522
- SHA1 cc31424ee51c738e45923ed22d79a4fea4661b32
- SHA512 255bb42a7aa82156e8791fac7e41fc4a89bd94cfd4df3d453814f846e7a3cb55fc47cba4f1b24e0e74bd888df084bf8644fa830bf5dadeee524bffff3bf0f78d
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.rd
- Size 32B
- SHA256 cb2ab478fd74678a2d9432f21381833e0045c023330209ef6cd7d4ab34f25c6b
- MD5 903555ab02ce9aa14503538cb2892b4d
- SHA1 5b6bd50dfc0e97e9fd2c5482b19f1ecf96b3ca1e
- SHA512 56556a4033ef8df7f69b4a23c1f450e852c6f7864d3aa5080cf2e0630a40d32148627164cf911c870f65ba80066f1e784ea8634f0282a6eb0fe671437a7fdf3d
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.ri
- Size 314B
- SHA256 fbc6f928bd771ac39e8697321e60765f122c107b555bf5301a305d05022cb1ff
- MD5 d6ba4779362da6f837ff289f0ecc49dd
- SHA1 ac4d02b81884a90f48fa07e253a7bca55fe1faa7
- SHA512 19ceda25279ff7cf371137abca39d7eb9ac10cbf913e86beefdc8bd3f56cd30b3926c4cdefe46781f51fc794b4d98974727270866f03da6c7bcdbf6725504df1
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.store
- Size 32B
- SHA256 55612e17689f4bb05f27e18b4f6d06ffef92a6a8893a5cfdd3d5b99a6028b549
- MD5 448e391c59eef34ee1defbe4dee4c41f
- SHA1 df1f890987371d7d8e6963c68b787856e42bc146
- SHA512 ce336ce895ba861dda7da27e8869dea065eb3c3403cac55cdf1935409e5ebc95b495370f87ed7416af20af533b15615472e333ae9f2fd2713040f526835399b7
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.store
- Size 127B
- SHA256 b11f3904daa2910b2727a89c915a36418124a1b9d717abaab2f8d5af83cfd7c3
- MD5 9500aa65d2e4ed5fa357d2930cbbeb85
- SHA1 e664f9275fbbdfeeb680b9c64ce4897688f7e266
- SHA512 b018d44b695de4311ede521a8b6ef5bb2fca5334551ce687b9c52368cf5db5d33ee827e57d90d914a71107b4fd3a33018ae8bb295694303ec3d4fc3b149d2328
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/files/.jiagu.lock
- Size 27B
- SHA256 5796106d0b075b6860fdca3e23fb2272b1ca1e25974b37a972f4f0b44476c108
- MD5 d47dd529b9e51949e8ac346481782d2f
- SHA1 e9d7676b4bf8e00034d9dbd675b83b496eebcbe3
- SHA512 4f8f895b816fb36a219c34f13dc36735e4bfb1057774280ff796c0a18f905706dfd1b839106b80095c8f0c830184f1841999c85cf89f2d2b0f44ba26491f18f7
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/files/__local_ap_info_cache.json
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/files/__local_last_session.json
- Size 129B
- SHA256 4a039701a07f1a1e3b8a027538b484a92219b3109c6b2882b178b62aff453461
- MD5 19ae70dc964a79e4ac2a7f22edc985c2
- SHA1 8668c0286427925a8003a42fd7314e3f16803a36
- SHA512 5544549676d3080ed196e35c96ee023ed8c88e617573f203f057fe67d664e40fbc06b7bee05e04e212d9b8e38c2f6f2e72e49c0d04d3cfcb4fa5404c74afee95
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/files/__local_stat_cache.json
- Size 484B
- SHA256 f153d96e464f07b569b2b2b3bb606cca1e771a3871e8edf0e108037909753066
- MD5 c0ec849711f5304e35dfb108756e1cf1
- SHA1 1ac622725afcaf9d243be698f5f4507e74a7bb27
- SHA512 0d0793ac95d52b9d5f4ae54b7d7a36064ea258fa2ef6dd1f6dfb1101a81c538cfc15a6f2a0523dce1d7675b01f821a3e21f49be9d3e70af0b1d627095babb626
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/files/__send_data_1718599293010
- Size 520B
- SHA256 76af15ecc0c9800377cebe71b463bdd661cf3160f54fdf5ac27b3222c3cd896b
- MD5 e7031f621348573f4cd2bfdb6cb90c3a
- SHA1 9dbe4882044e686f0a69f4cd9cf4c704cfa4431c
- SHA512 fd75d109e5588d1cff5e8dafc2a41b7f037d1ca333df71e8626f760e3c7d0ef62bfebe9e48049fe8f25b1f5de726e202a6a3b74cfa40b100a9026a988ae9926c
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/files/jpush_stat_cache.json
- Size 119B
- SHA256 5118b1e2003d072af1f985e54d3a848eb1dec21b7c8da9f93df94ded3e9b7180
- MD5 8ddde8882727b40b187a8b6ad5ed357e
- SHA1 3815a9c71b38fd712879b00abd04a1e413d33167
- SHA512 b5a29c96641fb802dd0cd68863948c2bd067bf00e77107cd097c09486243c3be466a86b42d419341bb410f76059fc9bba6a9218998df2707df396ad9f514c09a
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/files/jpush_stat_history/active_user/nowrap/13dbee0b-53af-450c-a081-6c88c76569be
- Size 159B
- SHA256 968bd9d2528931b6dfac95e5aacee72db2f61fc199150421fc686e6d53fcf67c
- MD5 a1a154dba97fe3888d0f213899293c29
- SHA1 fc3ca40c08cac7499adf5478720707eba8ee05dd
- SHA512 e7412e95f74f01ad9f918647a05caadd3cc48202b178f345f738f9d6e13568abd563b5cd9ea1743171eb0e8176b9debb35103db45c082dacf4329f5a2737ec58
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/files/jpush_stat_history/normal/nowrap/f6abb301-66bd-4ea8-9dcc-7120684bf137
- Size 187B
- SHA256 b3f9f91f27769ff40c4fcc75dbd7fea68c941a066282c24da957b4e6b828e605
- MD5 9e6bcee90dcc0b9d5fa6d404492d6ddf
- SHA1 64425c176e288abec415211bf819d08443fe1a27
- SHA512 3c7e79f7731e8690ad1abb128d588cfd13f97afe885393b049b4ebd71decc9fdf7db9d60260daa3f7689523968b638381655538266e7f7eeb065d82e826a8c45
- MD5 SHA1 SHA512
- Path /data/data/com.mfqbzs.reader/files/user_log_0_d3543_1718599422294
- Size 481B
- SHA256 a6e92a1f9dc540a03beb0d9139c91d17b81890e53c8c900c1e681495bcdd06ec
- MD5 270d5947d28a80ca81ccf5131c561af2
- SHA1 3972c77b4a2c447d0bb4d4cd38ec8c4d10777b58
- SHA512 cf150575424edc9d73f4ea34da3b8578a72567804204567558bc5ce01e6c7829a32dc7dc0f5993ea9f7ac8fed571acfed9ca605b61ad8bd4eb45ef020a12e44e
- MD5 SHA1 SHA512
- Path /data/user/0/com.mfqbzs.reader/[email protected]
- Size 6.2MB
- SHA256 401c07f0e4920106d6038ec7efb1dd7bf2cb27570786c26bb803ff668ac04ef2
- MD5 813f78c0c336708f25053c39e2aae3c2
- SHA1 f8f8523a2a95970a62dbea8834c4bbeedbca2fe3
- SHA512 0adeb448137e9fee1eaea58b50035e02136eb029d26fdad236d4dff8fa3f944c82c68a350d165fe8370cbb3386b4e43eca86c43f1f0add10585da4c92290185e
- SSDEEP 49152:LRmhaj7082QfC0K62b7xluczNKZGepDpmkZ4z86WAtW80LPD5UkArFm4k:LRmhajY8VLK62JU/pJU86RtWbPt+Mp
- MD5 SHA1 SHA512 SSDEEP
[email protected]!classes2.dex
- Path /data/user/0/com.mfqbzs.reader/[email protected]!classes2.dex
- Size 4.9MB
- SHA256 5a3c371cfbaf87530ec097a2d6c1822e21654666abfee6e0ce0e43f7296ff2b1
- MD5 06e7dc09904e96a5941c0c19d7f685eb
- SHA1 a2ebcdda0e00a56d84ea801f73ab902c7bc721b9
- SHA512 2e7e305799299e61e056fda6d3a6db1eb5512d95d6fbefdbb425c31c5071524241a7ef26c20d7d84f1f11ea84be5ff074e1e90c71bf5649061c9bddf9966cbf7
- SSDEEP 49152:a/KUn74abisny7iLHUKBB/zUrkKFdB/15wz7PdAc3mxqxoVZbX+AUx/nijh/j:aSPiLHTXzUrkKLVY/niR
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/.zp/.icosc
- Size 34B
- SHA256 d7eea261cd91b929390ce44df294438cd72bf0a5ba9157e9ff72e2aa3fd004e2
- MD5 a10c9ba68ac050dde40cab09d94f53d4
- SHA1 b5672565778da97e9eac695f1051221b631e00c0
- SHA512 45f9b529c598486c30c4bdf3d6505b7664bbfe9119e13fffe3de532fc269fd27884de8db1de913d5155f0a4dec2b89bedff93d9ac500322f327180f6ad24e3f5
- MD5 SHA1 SHA512
- Path /storage/emulated/0/360/.deviceId
- Size 48B
- SHA256 36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
- MD5 4c4c5285293d5141f582aefa4e038669
- SHA1 e01852a72e5a8e6f7d63a21426b515118196047b
- SHA512 097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399
- MD5 SHA1 SHA512
- Path /storage/emulated/0/360/.iddata
- Size 32B
- SHA256 a148d8aa53f9e06ea05dd37d553e3c129ceda0c24a33c805e751ad55f23e2656
- MD5 0804b19f86c292405645c1099a862718
- SHA1 918d98f3186df563c777730a7de65e61e0b62c5a
- SHA512 d5ece661cab47cb7dfbf2389e4ad741bbec473e7b3934cb3e08856d2ca74eb79420bcdca3c310e41a8175585a6b6d3fe840417060464f657cc80eafe16428656
- MD5 SHA1 SHA512
- Path /storage/emulated/0/backups/.SystemConfig/.cuid2
- Size 109B
- SHA256 7e5d0952d880827282e82d89d7027c3651b264c077eea0393d4719e95a86f450
- MD5 9975d8ea080a6f68ddfe7524d537cff6
- SHA1 28f74572ffe668578863543fe8e3a51d03eead4c
- SHA512 57f93ab22179aa61e3ae679b7a3d8ce5c5200cc03c64244b5aff1c68391aa214ced90f6032f9ec611aa210fa2843100db242b04c0ab06dd626bfc6774093a8f3
- MD5 SHA1 SHA512
- Path /storage/emulated/0/backups/system/.confd
- Size 20KB
- SHA256 2418a7e344c022770996b8db13d3bb83ab784ad167c1c1f40f2689a4c2c30028
- MD5 826d5e706922799591873ad10d261b23
- SHA1 01d46a29ea4a338669f7753a50a19d6ab54f5c4e
- SHA512 1b143edc7b49f7289fd3e7a52ee0a90c72bbdc8fda7825b3d854f94232528e6c8f920470ae7552881a32c3f4f2275e670e4836f3bface35fd3150edfb1c3e815
- SSDEEP 12:TLyKEg/UyNTSFbyRxw59YERmBEyPbAVOwG:TLy9gBSrY/GSEG
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/backups/system/.confd
- Size 24KB
- SHA256 67e386e6ca8398d959d3dbb45f5dc06f205c2cc4f68958d1e4fedfb5c423cae9
- MD5 e833300dd2e1df29b95a9139e1e6bca1
- SHA1 e0158acfa7495e2fc2bca567d0a4196c94d0ba9b
- SHA512 4c14c4e57ed780de2e8a1e921ac090c4e84068552c47b6e260b47b84bfdbba047a7b84e1e6a77dc4b8ce7a934ef9cc7ce31bef72edf9b2c6493378c7210800b8
- SSDEEP 12:TLWeO3wfrXFUybnl9YurNTSFbyRxw59YERmBEyPbD+:TLG3wDXF5nYuBSrY/GSK
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/backups/system/.confd
- Size 24KB
- SHA256 7eec5a25c860ad2f2c499ffa6004e3e38625700d14ea4ad10176744ca76d125e
- MD5 1189ec002b030d5f6438531439b9cda7
- SHA1 224d35496a150ae33b062d16d2def5185cb8625a
- SHA512 93d7d608497d3d790ae547acc277cc9debfa82c4620f4715c5228a28cf8da4974411788129b7a799ad69789f704ac6f0ca3d9c715487ac37e383046016b19940
- SSDEEP 24:TLqwDXF5nYuBSrY/GSP/IGWr/zu/Exvmq2OXJVJD:TWwDPnXBSrpSP/O7TmqTD
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/backups/system/.confd
- Size 28KB
- SHA256 52e48e9cb6ffa23d11c9a4aa77d08df22778d6db84b84770b6370961cfbed859
- MD5 bfbaeadfe98c88bf12186d6692dc335e
- SHA1 0464099c8a95c8fff6469bf3701829a8169e8947
- SHA512 faa741ce742f589696049ba3e61e6a87f0edc35c0a5b7489cce164b72515720d9c37544b8a4211af215b7bea1eb5f097b5c925413d18d0c7d89da090f4efe4d3
- SSDEEP 192:uGCILvQo/XCzFQgUndGoW7Kqv2Zvo8Wmjv/rN/exiy+:uh4v0UndGbWcGgRk3rNSiy+
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/backups/system/.confd
- Size 36KB
- SHA256 bdf6d14626c332ee5e680d0f3bd076b27e159fbc55eaaae1c6e34318361e0c4b
- MD5 994aede88a489c1cb445682d8eeaec5c
- SHA1 dae099d2909f2ad5cefc53ee21687dbb72a37ec5
- SHA512 bd4aca6944d37e7e177fe6eac033a327da36f9c58df64a97c670e36467e2382fd262587744b8ad90715550f35cf6fae5395eb80d094a9ea9af641f0966d11b95
- SSDEEP 192:60mGCILvQo/XCzFQgUndGoWN8X00btteqv2Zvo8Wmjv/rN/exiy+:6h4v0UndGbOk0ecGgRk3rNSiy+
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/backups/system/.confd-journal
- Size 512B
- SHA256 31a3e3e97764ea6b0a5513c53d6f4048915ce9c37b530f1ff9ca80dbb2a28fef
- MD5 29b1e23f3432d2affc219c4ec1bce8f7
- SHA1 f687714d43c15a711e6192d1eeca1b98ea0af5f2
- SHA512 cc35def87458865a0f03870075ef21ead639eef7909a5186f836b98d41752010e9a61bd5d0f49d3249c3449511f245378d6a85fa91407ad109068140280cbb8b
- MD5 SHA1 SHA512
- Path /storage/emulated/0/backups/system/.confd-journal
- Size 8KB
- SHA256 abf80453b22886cbb3446468a070621e37c0feeb911a5dc5b4e37bdb22dd9988
- MD5 d027c04c1216b9b88106d457f008dd54
- SHA1 940513711e8cd0902dd6e7c93db1421da1eecd7f
- SHA512 682429cc17ecebd35c6b8f530dcc623252b39e5647544203ada33cca6347bfd8c068cdeb3cf11d67fbfecde848a4faeada885f385d48527a14e0da88b4bc1b29
- SSDEEP 6:7+/l9hFn1Azpg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKV:7+tv0dqLiuWdwRmBEyPbe
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/backups/system/.confd-journal
- Size 4KB
- SHA256 93a4d8b082cd1fc66a4e8c7edbdb97ce7b697fa2073dc697594e2ec01a9678a9
- MD5 542f2657e375450bddd5d61e9bdfff0b
- SHA1 620b230f40cf1cb83c6e965e2fd04ccf8c5ffae4
- SHA512 243b29334b5dfbb90ba66a9bd6f827c9c015cdae3b1f11b32eddc098173c876dde27f3d704928cfc573c03dd336757bb5879b6cde2750b25e81b1b25281c102f
- SSDEEP 6:7+/lHHPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKI:7+tPqLJdTRmBEyPb7
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/backups/system/.confd-journal
- Size 8KB
- SHA256 f68c71348e52fc0ddd2192a56d7fa8d92abf64fc66ca704b584ee51edd069979
- MD5 e6e9b92c233e2b6b9a2fd90bbc13874a
- SHA1 b58e73a15813d88c481de9c3ffd2cde9ac7b8e08
- SHA512 09dd33bfd8dc347d326ccb2a22e1280454ac3adc2916a4f0c4c2e755bbc75b9622510cf12b638ad44d8660aeae050c7bb2ea2864dd68401c9bf09146c9fbd398
- SSDEEP 6:7+/l9F/lgPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuKg/ls//dn:7+tbt4qLmqCRmBEyPbz/lsXdn
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/backups/system/.confd-journal
- Size 8KB
- SHA256 1b726b0606967348473051d7df3f320f62d1dc09450b265cf7f248f1f2a471d2
- MD5 bff3adc22ae4a012e16ea002eb359c1c
- SHA1 9db50388a65a84bd7859a1a5caade46b6df8ac20
- SHA512 b190dad55d9d26c467d1cf5f753ab5ba51be4973a62648ca6e16452c36ece210f72b9342781bbc6430671747af90eeaefb5b5fb31bd3ad8aec258c8b38e443f9
- SSDEEP 12:7+tonqLyKEg/UyNTSFbyRxw59YERmBEyPbYt:7+tgqLy9gBSrY/GSi
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/backups/system/.confd-journal
- Size 16KB
- SHA256 cd7dff574f5265531d00f7ebce16ee9cb09164dd1ba8919b2536e9c670f31a72
- MD5 1738b9846641b1bff1acb2d8310fbaac
- SHA1 3c51c72a60dae771ab23d2a7a2bc59907c83e145
- SHA512 153c565b29570468abd13961369793b3129867b7d173e2130f20a2d2e35835fb6eb6611fc042244f687a275f9dd72a7574c3024a74e438b5856a873009d08ea0
- SSDEEP 96:7JJ08rvqvsJv4c8d+2Io8zKtNQpjv/rNYuFeVzLsf6AyoG:7JJ0Oqv2Zvo8Wmjv/rN/exiyt
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/backups/system/.timestamp
- Size 25B
- SHA256 fcf20b402c74cffede88233aee4939380f4b2891673898ba08877409ac78a9fb
- MD5 6e44bfe50041003b99ff4374a842e093
- SHA1 8d359a7877fb57dd37f8102c5a0ea5b8f4ca6fc5
- SHA512 887fb9861569fc66ee34d0e2e082b8535d4acf10831c3decb534c3c7dda4002b88a3dbdfe950111c1b3611a840c07fa09a289352976383a9b1d9e7e71d7cef37
- MD5 SHA1 SHA512
- Path /storage/emulated/0/backups/system/.timestamp
- Size 55B
- SHA256 427e8c47f736ee0507a7fd7e0f3b172213a3b94efe1664d888f1d61acc66f51e
- MD5 a4ec55829a9c02baf1b0ac6895f5159f
- SHA1 e67dd16d46d3c3f1bd8cf1236ff836e111864b58
- SHA512 24cfb24f5a912ae0181478120d1334b6924fd614259afa50e5bc9c696c1bdd8791b7579703e6e1d496aa7f5fe758fe11c61eb70634d8e47268f7aa4c1fac482a
- MD5 SHA1 SHA512
- Path /storage/emulated/0/backups/system/.timestamp
- Size 84B
- SHA256 004af0a5c64f9066f68fa9a70d9070eba1ffd017130f46c0e48169a60296a24e
- MD5 5e9628074e6bbbf09d0bbc52f4b666b6
- SHA1 89bd7df723d7f66e73163a16a866544f955db34e
- SHA512 ad794f54d620564feffc0a7daf0303405023a1086859be4c2ec69d226c4ca4531be5017d86aa8ae15b054b386044cfae4fdd25504fe5738bfe9530e76fbf7f71
- MD5 SHA1 SHA512
- Path /storage/emulated/0/backups/system/.timestamp
- Size 114B
- SHA256 244f3b215934940db0c327153a513be7622117fdf59cd4327f0ddf6a5a6c0360
- MD5 806a36019c283dd8fe350e8d481ad616
- SHA1 3575aa2cf176b5728f10e43f5f53a35b528271fc
- SHA512 930ad128b3d65c9153bcf090e17e3d3acca3527850378ee3b6f388be08e38fd09745c4c0a85e1d36379bd5c48d8af544bb0d2e6f34edf08af32d5277ee37867c
- MD5 SHA1 SHA512
- Path /storage/emulated/0/backups/system/.timestamp
- Size 138B
- SHA256 f2790ec6ae11fa6dea62d600184a7be2740c6f7f4cd1fb3063fa889e7bc1ba20
- MD5 76d054d418bd1c06b1b47aad0ae4617f
- SHA1 6b2a2d9ddf4dde943ec81a5bda9474d3db7fae33
- SHA512 47bc981d3db5f82c2c3822b3be086b575b7d9759f0672866554ba0d5a9aff3d993dd4c192a6efcd8e9ec787018e5afb0144677fbef6a340b8cda6f03b11ac8f8
- MD5 SHA1 SHA512
- Path /storage/emulated/0/data/.push_deviceid
- Size 32B
- SHA256 d743b03311fe2d57b87c6aad30ca5922c70269e34134dab9141cba4c78f0453b
- MD5 1a1520b5311a0f8d6432a641745eed45
- SHA1 cafc648540fb91ea5926748406e08c53451413d1
- SHA512 9ef55371837e47efc8f0f6d8b82cab220ecdb1c34e6a2c623ec97347305959d943b458a900e462931587cddcb2164a519ee79b3aee52fac1e60e1735acfa1113
- MD5 SHA1 SHA512
- Path /storage/emulated/0/mfqbzs/cache/alipay_msp.apk
- Size 748KB
- SHA256 76a24f83ad15586ff9a2081e420a707be9ddb0b5047e5b6de5974c41624ff2c1
- MD5 d06ea38e4210a87d6b96f8b0491df677
- SHA1 3ba573396398757088e559a9d372049a377eb05a
- SHA512 3d43e5bfad2b703a804a53048b6a88228a11fb80ac641d6594f774cc07f6c7367e0ee80b29966d02c9206542f467f55b0f1ddbbfef0ec372256314a7d1071f30
- SSDEEP 12288:IjRAsoln+WMB1EgrGERh4xWgtSM7vXrRCn4I5p2Cnfv:IjRApZ+WM7yER61P7jw4IGSfv
- MD5 SHA1 SHA512 SSDEEP